MSP raises concerns following NHS Dumfries and Galloway cyber attack

There are fears that personal information of patients and staff could have been breached

Author: Jemma HallPublished 16th Mar 2024

MSP Finlay Carson has voiced concerns over a cyber attack on NHS Dumfries and Galloway yesterday (15 March).

He said it's worrying how hackers were able to obtain patient and staff identifiable data. NHS Dumfries and Galloway are encouraging everyone, including staff and public, to be on their guard for any attempt to access their systems or approaches from anyone claiming to be in possession of data relating to them.

MSP Finlay Carson has given reassurance that the health board is working hard, alongside the Scottish Government and Police Scotland, to resolve the ongoing issue. He said: "We need to understand what the impact on services will be, but I'm assured that those impacts on services are minor at the moment.

In a statement on its website, NHS Dumfries and Galloway said: NHS Dumfries and Galloway has been the target of a focused and ongoing cyber attack.

This prompted a swift response in line with our established protocols, working with partner agencies including Police Scotland, the National Cyber Security Centre and the Scottish Government.

There may be some disruption to services as a result of this situation.

During these incursions into our systems, there is a risk that hackers have been able to acquire a significant quantity of data.

Work is continuing together with cyber security agencies to investigate what data may have been accessed, but we have reason to believe that this could include patient-identifiable and staff-identifiable data.

Breach of confidential data is an incredibly serious matter. We are encouraging everyone, staff and public, to be on their guard for any attempt to access their systems or approaches from anyone claiming to be in possession of data relating to them.

In any of these situations, contact Police Scotland immediately by phoning 101.

The NHS board says updates will be be provided at www.nhsdg.co.uk/cyberattack